[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: Updated:RE: [FW1] drops on port 2301
There have been known exploits to Compaq Insight Manager, so if you do need to use it, make sure you are blocking access to these servers on that port from the Internet... Steven Schuster wrote: > The port 2301\udp broadcast is used by the Compaq Insight Manager to know > what other servers are also running the Compaq Insight Web Agent. When you > go to the server on http:\\myntserver:2301, you will also get a list of all > of the other servers that are running the web agent. This list is updated by > the 2301\udp broadcasts. Steve Schuster, CCSE, CCNA > Midwest ISO > Security Analyst > -----Original Message----- > From: Tony Wong [mailto:[email protected]] > Sent: Thursday, March 01, 2001 3:44 PM > To: [email protected] > Subject: [FW1] drops on port 2301 > > I am getting a lof of drops on service 2301, nbname, all udp packets for rule > 0 and destination 255.255.255.255 . I am not logging implied rules and the > first rule in my rulebase is: to drop bootp, NBT and ident protocols and no > logging. Any ideas? -- Steven Lee, CISSPSenior Network Security EngineerFAX AVCOM Technologies, IncPager 4636 E Marginal Way S, Ste B-100 http://www.avcom.com Seattle, WA 98134-2383 mailto:[email protected] ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|